This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft File: dC44IKB42kewo3Ti06ZtYmPB4j8.mft (raw, json) Hash identifier: nkFtpBuNpBq84E0GoXtGPPOsTpcMgFtBgU7NSgTHYU0= Subject key identifier: 57:73:A5:C4:67:CA:55:3B:D8:84:95:92:9B:87:6C:EE:6C:7A:A0:74 Authority key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F Certificate issuer: /CN=742e3820a078da47b0a374e2d3a66d6263c1e23f Certificate serial: 019B631F02AFD4C758B4E5EEFEEAC1D56204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft Manifest number: 106C Signing time: Sun 28 Dec 2025 04:02:15 +0000 Manifest this update: Sun 28 Dec 2025 04:02:15 +0000 Manifest next update: Mon 29 Dec 2025 04:02:15 +0000 Files and hashes: 1: dC44IKB42kewo3Ti06ZtYmPB4j8.crl (hash: NdvJueRVD+EldtUcnm9jpvyx4AI4qcpKgDbCkfz9gt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1f:02:af:d4:c7:58:b4:e5:ee:fe:ea:c1:d5:62:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f Validity Not Before: Dec 28 04:02:15 2025 GMT Not After : Dec 29 04:02:15 2025 GMT Subject: CN=5773a5c467ca553bd88495929b876cee6c7aa074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3e:00:64:22:b1:b1:37:6e:b5:f7:22:b8:e9: 39:ac:93:1c:7e:e0:ab:1d:ff:4c:3d:b7:fb:6d:50: a0:d7:3b:a5:64:04:e7:ad:aa:89:f4:34:69:92:4e: c6:94:60:96:40:a0:c5:df:ad:5f:27:bd:63:fd:25: fd:a2:08:01:58:6f:48:5d:d5:74:71:fb:fb:ac:ce: 2c:10:c0:51:fb:9e:a4:50:a8:c8:e2:c3:ab:46:05: 58:68:0c:f6:93:a3:ff:2b:53:3e:79:aa:ab:8a:0d: 16:d4:c3:d5:a9:a4:e9:e6:9c:9f:35:b2:fe:b8:60: 88:ea:5e:d7:7a:98:b9:a9:9c:1c:4b:5f:cb:fe:c6: ef:c8:2f:b0:a1:4e:38:ad:31:4a:ab:5b:69:2e:79: 58:53:cd:b5:cb:a4:fc:e4:65:73:3b:06:f8:3e:22: c9:8f:30:32:ee:46:ac:dc:33:ab:5f:95:6c:ea:22: 3b:ed:69:cb:ce:35:8c:d1:14:4a:57:86:f1:ce:6e: 65:17:32:7b:00:41:28:bf:1c:ee:e5:83:55:39:d6: fa:a8:f3:3c:c4:00:cb:fe:59:69:49:de:05:51:c4: 4a:a6:41:fa:b0:b2:01:9a:1d:32:22:0f:05:f9:6e: 7c:b5:47:86:93:b6:97:ac:f2:01:3c:a6:90:d7:3e: bb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:73:A5:C4:67:CA:55:3B:D8:84:95:92:9B:87:6C:EE:6C:7A:A0:74 X509v3 Authority Key Identifier: keyid:74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:25:1d:4f:e4:86:d3:af:cd:7b:4b:6c:98:e9:f7:a3:05:5f: 6f:c7:dc:98:01:ca:24:1d:94:30:48:f4:f9:25:9d:d7:05:a8: 1c:4e:0a:24:69:0c:47:1c:89:95:57:0a:c9:13:b2:bd:f7:91: 51:9c:63:05:6a:b3:15:bb:ef:14:84:05:5e:75:a1:e1:3a:a4: c0:3c:bd:2f:8c:d1:f2:70:83:a0:c4:e3:36:d7:af:9a:4b:a9: e6:9d:aa:5c:df:4f:35:b7:12:2d:d9:e8:f1:78:80:20:68:c7: 69:09:94:3c:43:3a:79:35:cd:61:ec:18:af:cc:b6:04:d7:95: f9:25:ce:a8:e7:b1:05:58:28:da:37:cd:3e:97:55:3b:47:b4: 6d:5b:84:09:27:2f:65:17:1f:20:09:a9:af:de:81:86:ad:19: b5:b6:e9:70:76:cc:d0:25:c4:0e:17:20:26:93:77:ed:ec:d3: bf:f2:2f:03:9a:01:af:a4:0b:30:83:51:c0:71:26:82:d5:85: f4:3b:6a:f3:12:8c:a4:d0:2c:19:ee:15:c6:df:1f:3e:70:2d: 90:6b:97:69:ca:42:1f:6a:2f:6a:5c:12:20:60:3b:7e:a7:c4: a3:e9:ad:4e:f5:fa:7f:40:ea:92:78:2f:77:68:85:49:33:7c: 65:75:71:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHwKv1MdYtOXu/urB1WIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MmUzODIwYTA3OGRhNDdiMGEzNzRlMmQzYTY2ZDYyNjNj MWUyM2YwHhcNMjUxMjI4MDQwMjE1WhcNMjUxMjI5MDQwMjE1WjAzMTEwLwYDVQQD Eyg1NzczYTVjNDY3Y2E1NTNiZDg4NDk1OTI5Yjg3NmNlZTZjN2FhMDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT4AZCKxsTdutfciuOk5rJMcfuCr Hf9MPbf7bVCg1zulZATnraqJ9DRpkk7GlGCWQKDF361fJ71j/SX9oggBWG9IXdV0 cfv7rM4sEMBR+56kUKjI4sOrRgVYaAz2k6P/K1M+eaqrig0W1MPVqaTp5pyfNbL+ uGCI6l7Xepi5qZwcS1/L/sbvyC+woU44rTFKq1tpLnlYU821y6T85GVzOwb4PiLJ jzAy7kas3DOrX5Vs6iI77WnLzjWM0RRKV4bxzm5lFzJ7AEEovxzu5YNVOdb6qPM8 xADL/llpSd4FUcRKpkH6sLIBmh0yIg8F+W58tUeGk7aXrPIBPKaQ1z67awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdzpcRnylU72ISVkpuHbO5seqB0MB8GA1UdIwQY MBaAFHQuOCCgeNpHsKN04tOmbWJjweI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEM0NElLQjQya2V3bzNUaTA2WnRZbVBCNGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84OWZjNTEtZDQ3NS00ZWVlLWE5NzAt OTMwNzAwY2E2MTdmLzEvZEM0NElLQjQya2V3bzNUaTA2WnRZbVBCNGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS84OWZjNTEtZDQ3NS00ZWVlLWE5NzAtOTMwNzAwY2E2MTdm LzEvZEM0NElLQjQya2V3bzNUaTA2WnRZbVBCNGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyUdT+SG 06/Ne0tsmOn3owVfb8fcmAHKJB2UMEj0+SWd1wWoHE4KJGkMRxyJlVcKyROyvfeR UZxjBWqzFbvvFIQFXnWh4TqkwDy9L4zR8nCDoMTjNtevmkup5p2qXN9PNbcSLdno 8XiAIGjHaQmUPEM6eTXNYewYr8y2BNeV+SXOqOexBVgo2jfNPpdVO0e0bVuECScv ZRcfIAmpr96Bhq0ZtbbpcHbM0CXEDhcgJpN37ezTv/IvA5oBr6QLMINRwHEmgtWF 9Dtq8xKMpNAsGe4Vxt8fPnAtkGuXacpCH2ovalwSIGA7fqfEo+mtTvX6f0Dqkngv d2iFSTN8ZXVxuQ== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:43 2025 by rpki-client